Polygon releases Bor v2.10.3 to fix a parallel execution vulnerability, clarifying that no exploitation has been discovered yet.

PANews October 15 news: Polygon Labs announced that Bor v2.10.3 is now officially released, fixing two medium-severity denial-of-service vulnerabilities in BlockSTM V2 parallel block execution. The first vulnerability involves a shared Keccak-256 cache with no capacity limit set, and the second vulnerability involves repeated computation of smart contract code hashes during parallel execution. The official statement said that the above vulnerabilities affect Bor v2.10.1 and v2.10.2, which have BlockSTM V2 enabled by default, and no exploitation has been found on the mainnet or Amoy testnet so far.